CVE-2006-4248
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2006-4248
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
thttpd on Debian GNU/Linux, and possibly other distributions, allows local users to create or touch arbitrary files via a symlink attack on the start_thttpd temporary file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Debian GNU/Linux 'start_thttpd'权限许可和访问控制漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Debian GNU/Linux以及可能其他发行版本中的start_thttpd存在权限许可和访问控制漏洞，本地用户可以通过对start_thttpd临时文件的symlink攻击来创建或获取任意文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2006-4248
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2006-4248
请登录查看更多情报信息。
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=396277x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2006-4248
Same Patch Batch · n/a · 2006-10-31 · 27 CVEs total
| CVE-2006-5628 | Unisor CMS 'Login.ASP' SQL注入漏洞 | |
| CVE-2006-5611 | Toshiba Bluetooth Stack 未明漏洞 | |
| CVE-2006-5610 | Fully Modded phpBB Teake Nutma Foing 'common.php'PHP远程文件包含漏洞 | |
| CVE-2005-4814 | Segue CMS Apache HTTP Server 未限制文件上载漏洞 | |
| CVE-2006-5618 | Netref 'Cat_For_AFF.PHP' 目录遍历漏洞 | |
| CVE-2006-5617 | Thepeak File Upload Manager 'index.php'目录遍历漏洞 | |
| CVE-2006-5616 | OpenPBS SUSE Linux多个未明漏洞 | |
| CVE-2006-5615 | TextPattern 'Publish.PHP'远程文件包含漏洞 | |
| CVE-2006-5614 | Microsoft Windows NAT帮助程序远程拒绝服务漏洞 | |
| CVE-2006-5613 | MP3 Streaming DownSampler 'Core.Inc.PHP'远程文件包含漏洞 | |
| CVE-2006-5612 | GestArt 'Aide.PHP'远程文件包含漏洞 | |
| CVE-2006-5619 | Linux kernel'ip6_flowlabel.c'的ip6fl_get_n函数本地拒绝服务漏洞 | |
| CVE-2006-5606 | BytesFall Explorer 多个未明SQL注入漏洞 | |
| CVE-2006-5629 | Hotfix Hosting Controller多个SQL注入漏洞 | |
| CVE-2006-5627 | QnECMS 多个PHP远程文件包含漏洞 | |
| CVE-2006-5626 | phpFaber CMS 'Htmlarea.PHP'跨站脚本攻击漏洞 | |
| CVE-2006-5625 | N/X WCMS 'NXHeader.Inc.PHP'远程文件包含漏洞 | |
| CVE-2006-5624 | Multi-Page Comment System 多个远程文件包含漏洞 | |
| CVE-2006-5623 | EE Tool 'Ip.Inc.PHP'PHP远程文件包含漏洞 | |
| CVE-2006-5622 | Coppermine Photo Gallery 'Picmgr.PHP' SQL注入漏洞 |
Showing top 20 of 27 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2006-4248
No comments yet